Vulnerabilities (CVE)

Filtered by CWE-414
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-54906 1 Rubyconcurrency 1 Concurrent Ruby 2026-06-26 N/A 9.8 CRITICAL
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write lock. Any thread with access to the lock object can release an active write lock held by another thread. A second writer can then enter its critical section while the first writer is still running. Concurrent::ReadWriteLock#release_read_lock also decrements the shared counter even when no read lock is held. Calling it on a fresh lock changes the counter from 0 to -1, after which normal read acquisition raises Concurrent::ResourceLimitError. This is a synchronization correctness issue in the public Concurrent::ReadWriteLock API. This vulnerability is fixed in 1.3.7.
CVE-2025-54625 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.7 MEDIUM
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-54510 2026-06-17 N/A N/A
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.
CVE-2023-5447 2026-06-17 N/A 5.5 MEDIUM
Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the service, resulting in denial of service for the Synaptics Hardware Support App.